---
- name: Disable swap
  ansible.builtin.shell:
    cmd: swapoff -a
  become: yes
  changed_when: false

- name: Comment out swap entries in fstab
  ansible.builtin.replace:
    path: /etc/fstab
    regexp: '^(\s*[^#\s][^\s]*\s+swap\s+.*)$'
    replace: '# \1'
  become: yes

- name: Load overlay kernel module
  ansible.builtin.shell:
    cmd: modprobe overlay
  become: yes
  changed_when: false
  failed_when: false

- name: Load br_netfilter kernel module
  ansible.builtin.shell:
    cmd: modprobe br_netfilter
  become: yes
  changed_when: false

- name: Persist kernel modules
  ansible.builtin.copy:
    dest: /etc/modules-load.d/k8s.conf
    content: |
      overlay
      br_netfilter
    mode: "0644"
  become: yes

- name: Configure kernel network settings
  ansible.builtin.copy:
    dest: /etc/sysctl.d/k8s.conf
    content: |
      net.bridge.bridge-nf-call-iptables  = 1
      net.bridge.bridge-nf-call-ip6tables = 1
      net.ipv4.ip_forward                 = 1
    mode: "0644"
  become: yes

- name: Apply kernel network settings
  ansible.builtin.command:
    cmd: sysctl --system
  become: yes
  changed_when: false